keep vulnerabilities

CVEs whose affected-version data names the keep package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-65057Critical· 9.3PoC

2mo ago

Keep Unauthenticated Server-Side Request Forgery via POST /providers/healthcheck

Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the backend issue arbitrary HTTP requests by supplying attacker-controlled host values to the unprotected healthchec…

▾ Abyssalkeephq · keepEPSS 0.43%via CVEORG